Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e2035303635.roa
File:                     36322e3131322e3132382e302f32302d3234203d3e2035303635.roa (raw, json)
Hash identifier:          9xWTsKIPhZtQ2RJm2dxiBBmpkLUie95Wfv+dwyOKt3c=
Subject key identifier:   23:AD:4E:B5:46:82:93:69:DA:89:8D:85:8A:0D:FD:22:FF:A2:0A:2F
Certificate issuer:       /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial:       6941CB53DE735899F78A512717038B4FEF04DF85
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e2035303635.roa
Signing time:             Fri 18 Aug 2023 05:04:41 +0000
ROA not before:           Fri 18 Aug 2023 04:59:41 +0000
ROA not after:            Fri 16 Aug 2024 05:04:41 +0000
asID:                     5065
IP address blocks:        62.112.128.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:41:cb:53:de:73:58:99:f7:8a:51:27:17:03:8b:4f:ef:04:df:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
        Validity
            Not Before: Aug 18 04:59:41 2023 GMT
            Not After : Aug 16 05:04:41 2024 GMT
        Subject: CN=23AD4EB546829369DA898D858A0DFD22FFA20A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:3f:b1:97:2f:68:80:e2:a2:6d:fb:40:c7:
                    1a:7b:de:b2:ad:14:f9:7a:31:e9:e3:ee:30:3b:85:
                    e9:91:73:fa:9e:fc:24:76:63:f4:25:25:43:28:04:
                    69:c7:33:f9:72:6d:fc:f6:11:a7:84:12:29:ba:67:
                    ea:04:48:63:e4:f7:5e:87:02:ed:da:cf:81:19:f0:
                    42:0a:14:5a:8c:61:6b:08:97:62:30:5d:11:17:8a:
                    ab:1f:01:f7:6f:35:f3:18:6b:51:90:8a:b4:a9:18:
                    58:45:88:04:6f:ab:18:1f:5a:5c:c4:fc:3d:d4:c6:
                    1f:01:6e:77:49:c1:4b:c1:ed:3d:86:f4:d3:2c:71:
                    e4:b0:a9:ee:f0:fc:f4:aa:47:65:c0:37:0c:f2:5e:
                    cf:6f:a1:53:52:19:3a:9c:ed:bf:18:13:5e:ce:7e:
                    2c:15:ea:0e:cb:d8:25:f0:cc:79:bc:41:af:5a:4e:
                    9d:e4:7e:6b:9a:87:2f:8d:b9:95:da:51:60:ce:4d:
                    2e:a4:bd:16:a0:5c:30:c3:11:39:92:6c:3e:e7:0d:
                    5d:fb:2d:27:56:15:cf:f9:5f:c1:3c:b1:bf:74:c5:
                    d8:0e:c7:43:c6:bf:d0:d7:2d:08:12:1e:70:07:29:
                    48:ed:14:7b:84:cc:83:21:d6:2c:c1:bc:af:fd:2c:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AD:4E:B5:46:82:93:69:DA:89:8D:85:8A:0D:FD:22:FF:A2:0A:2F
            X509v3 Authority Key Identifier:
                keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e2035303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.112.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:8a:4d:15:95:91:5a:8c:85:dd:27:ff:0b:f1:81:b9:d9:f9:
         6f:6d:03:05:2c:8e:68:f7:52:63:02:16:0c:ac:75:26:a1:ac:
         13:81:29:c2:3d:16:51:c8:6b:78:e5:32:a2:bc:ca:d7:b4:fd:
         7f:53:a0:7f:0c:6b:6e:3d:84:a0:5c:2f:a8:a7:99:9e:1f:ac:
         e1:a8:cb:13:37:cf:ec:30:01:5a:b1:c3:65:a4:8d:6e:a7:fb:
         88:11:18:89:10:c7:c4:ac:d4:58:27:37:72:c8:1b:66:ea:79:
         44:e5:20:9a:ae:5b:32:4c:6a:ba:54:ea:cc:de:86:ee:4b:7c:
         7b:44:54:d9:c4:7a:af:fc:f7:26:db:66:b0:0b:80:79:c3:50:
         f1:91:82:08:76:35:eb:0e:4d:9e:aa:77:cd:71:48:32:4a:e7:
         06:f2:f2:c7:9e:f2:e5:f1:d7:14:28:43:dd:42:12:6c:93:61:
         c2:e5:20:8d:81:68:31:c2:1b:ef:0c:28:12:22:d0:aa:92:39:
         21:c4:71:74:05:77:99:99:47:48:3b:b8:1f:b1:d5:af:4c:8c:
         f1:c5:ce:d2:0b:da:4d:3d:56:e8:39:38:31:a6:ad:eb:ad:8b:
         39:6f:04:a9:37:fe:1a:46:ae:db:5b:0b:4a:fe:ae:8e:7d:ed:
         de:02:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----